Filtered by vendor Levelprograms Subscriptions
Filtered by product Kmaleon Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-47766 1 Levelprograms 1 Kmaleon 2026-01-16 7.1 High
Kmaleon 1.1.0.205 contains an authenticated SQL injection vulnerability in the 'tipocomb' parameter of kmaleonW.php that allows attackers to manipulate database queries. Attackers can exploit this vulnerability using boolean-based, error-based, and time-based blind SQL injection techniques to potentially extract or manipulate database information.